4 Commits

Author	SHA1	Message	Date
Tim Hughes	e8160c9fae	fix: same endpoint for NewLDAPIdentity & NewWithCredentials (#9433) ... Also enables use of https endpoints Fixes #9431	2020-04-24 10:44:45 +05:30
Harshavardhana	77dc2031a2	Fix LDAP responseXML to be named appropriately (#8285) ... This PR additionally also adds support for missing - Session policy support for AD/LDAP - Add API request/response parameters detail - Update example to take ldap username, password input from the command line - Fixes session policy handling for ClientGrants and WebIdentity	2019-09-24 03:51:16 +05:30
Aditya Manthramurthy	dfa1b417a8	Update comments in ldap example client code (#8257)	2019-09-18 01:59:31 +05:30
Aditya Manthramurthy	a0456ce940	LDAP STS API (#8091) ... Add LDAP based users-groups system This change adds support to integrate an LDAP server for user authentication. This works via a custom STS API for LDAP. Each user accessing the MinIO who can be authenticated via LDAP receives temporary credentials to access the MinIO server. LDAP is enabled only over TLS. User groups are also supported via LDAP. The administrator may configure an LDAP search query to find the group attribute of a user - this may correspond to any attribute in the LDAP tree (that the user has access to view). One or more groups may be returned by such a query. A group is mapped to an IAM policy in the usual way, and the server enforces a policy corresponding to all the groups and the user's own mapped policy. When LDAP is configured, the internal MinIO users system is disabled.	2019-09-10 04:42:29 +05:30